bac4f7dd5857b8bc722e85909f539d9230d2d1d1bb749a6ac776008cc44cc616

Sharing

Copy URL Twitter E-mail

General

Target
OpenUtau-win-x64.exe
Size 163.9MB
Sample261104-1w72jsf12m
SHA256 bac4f7dd5857b8bc722e85909f539d9230d2d1d1bb749a6ac776008cc44cc616
MD5 16b242af3741343bfa2a1bd53f8fb32d
SHA1 e70eb8c6e2b4fe8eaa6e188b3a4cebdc3b5f4732
SHA512 02a9518d5d6c667e876608539f821e4b0784cb6bab0eb0bc7285dfc23a5569022324c7790957fd3e0c58acea7f8d790d9cb753dcb3d4363443af46718d396b93
SSDEEP 3145728:O0ZHvPlcH9Q5Cn8wthsiXimWrvl/4BqdJqjiHJfwC5UmSpd6hVXjCaPZYqHnP:7pvNcH9z86imWrvlLguJfwGQOCKvP
TLSH
T184883382BF24CB9FD758E2B256A3DE0A42730C7EB84FD9E5C4F63908563DAD1182544B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  OpenUtau-win-x64.exe
- Size 163.9MB
- SHA256 bac4f7dd5857b8bc722e85909f539d9230d2d1d1bb749a6ac776008cc44cc616
- MD5 16b242af3741343bfa2a1bd53f8fb32d
- SHA1 e70eb8c6e2b4fe8eaa6e188b3a4cebdc3b5f4732
- SHA512 02a9518d5d6c667e876608539f821e4b0784cb6bab0eb0bc7285dfc23a5569022324c7790957fd3e0c58acea7f8d790d9cb753dcb3d4363443af46718d396b93
- SSDEEP 3145728:O0ZHvPlcH9Q5Cn8wthsiXimWrvl/4BqdJqjiHJfwC5UmSpd6hVXjCaPZYqHnP:7pvNcH9z86imWrvlLguJfwGQOCKvP
- TLSH
  T184883382BF24CB9FD758E2B256A3DE0A42730C7EB84FD9E5C4F63908563DAD1182544B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
- MD5 4b8a750993567ac9a350ba9768fabfa0
- SHA1 7ee7a8c313b292d62561b085c9d490c0f8065624
- SHA512 c2a06e352815a2f5340e8244cf2c5a4a5cd7e7848ea67e454ab207262cb33130008491e83d053c778bea97720f7387de737bf15355db3cd5477b94f3571107bb
- SSDEEP 48:S46+/TTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mkGofjLl:zxuPbO5tCZBVEAWyMEFv2CmqL
- TLSH
  T171C1A370B3D248B9D591413778AB33D36612AE746784500FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Accessibility.dll
- Size 20KB
- SHA256 582684c68564516ad2ecdfe14534b2ff80fce67bba55c554f1b65be69e4e9360
- MD5 6bb141e5c3f524c222528e2eec319abd
- SHA1 b151ea7efe22089009e6501ab5f3c10b13ab447d
- SHA512 f51a15f5735074d8d778062f09f844f8681d9c16598ad7f680bc5b9c785191db3859e3ddd0475409402cca36baf8cd069108533fb06b5d8c556ca60840843b4e
- SSDEEP 384:A3eBmy0h68SGRMOcHiJWP/W7LTZlNVrj/R9zbjNZE+:A3POrOcHnarjZ9zbPl
- TLSH
  T136924C83F718E162EDAB6A7569A8EA063F39E7865501CF27185CF20D0D437C09F52639
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  AsyncIO.dll
- Size 76KB
- SHA256 5acadd4b7c21b7c6b3df2913149fedbeddb96c108704abcf220dcc1852ce1430
- MD5 733c024fd7e859c0cd3498c67597daf0
- SHA1 57e58decdcde9d129d20de5dae9dd24eeceea49f
- SHA512 f848f2ca0c125aadc7aa9288962f5fd5e2c0a0e131b2540948c2cc51839baa233775a07f126f8862ca5f1cede3f3f2a2287f4c8da8e38038b7ab9050e3408a5f
- SSDEEP 1536:mP0yd0ZeraRyi0S/5wASbXuhWhn6gIc+5VDE+f:mPoeE5x5wAG3IrDF
- TLSH
  T18B735AB933988A13F62D4A3C99634925E2B4F1D217C2C7CF4A8ECA8D6F633C1D971156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Avalonia.Base.dll
- Size 6.7MB
- SHA256 9f5c935522be4058a772be9ad81bea490e641a891f445a49092aaf4fbd30a01d
- MD5 bcb791a77bc1d81e482c5a522d5c0ca7
- SHA1 03d09dc9d672e287edaadc26f82d2d8b79f5a0f8
- SHA512 9181504240393f307dc2e8b4f7a50984a33d7a0632288a2509c3366413dcda6bebc723bee7485dfc541ec39e1e1709e115386f6f7e42f67340b5207599d79f3d
- SSDEEP 49152:1eBbZRUvUvTy1m0a+0fWMkqPnwa9kfhPuGIv2rIh6EuB8gDWmHRtTyK4r3xQzHYa:EBbZRZ9KMPn5FPcN4o+Hf4
- TLSH
  T1E3668D05B3850E3AD67AD1BEC2C39311E570A8E29392C6CB4A54DB5B2F433D17E7B14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Avalonia.Controls.ColorPicker.dll
- Size 1.1MB
- SHA256 8e930a76e89aa0ceee23a5b19a66e714d69519b58e7f34d6b395a8daaa4c4928
- MD5 ae798ce07a995a6e7e01e8b3c91204c8
- SHA1 1da551c717563222752c7db0ef6ba2859791ba2b
- SHA512 d0b99b8afd470d06e78c5c38baf7a01a2415faae29708b32ffb2514b2cd323bc7b30cedf1fe922aff88f1646fd9668f6a53c2b5ff94999e5908249815021a016
- SSDEEP 12288:LIsAuOxYLeodNPBgJMBZQJ3TszExnSXXrIJqICIf:L2uOYx3TByTDnqXBICIf
- TLSH
  T13A352A2253A04A64C33A793C83721103FE74389F9274149FBAADAD911FE7743563BB5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Avalonia.Controls.DataGrid.dll
- Size 1.0MB
- SHA256 edd8f9971ecae0692668e414e7a4d601789d35895395663a63af60048726353a
- MD5 47b0fe40edf65a50450872888252d4b9
- SHA1 7fd27eade5bc0882c03e93fe47cac57f7152ddd3
- SHA512 279512e65df29814eff9bb78096eb741dc8a0e12f80b3261fe5c34c2ef9200ff8b71c7b3c5b251ec5a3ae92bd8389e6703195829976f5216c8683af847a536e5
- SSDEEP 12288:QiNJwWIjtJ0wFkiKbC+ELibRS336DBDRo+to3qrP5R/:LBwFkiHdLHY/RlLj/
- TLSH
  T1DA356B2997CC8A1DE36AE53CC1574532EBF0A89213B1EECB4910DD855F8B7C3A376216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Avalonia.Controls.dll
- Size 3.3MB
- SHA256 140192ace9edeeb219be5903f12611ba87ffbd3577c342e3febf1c52f9540150
- MD5 8ef41a82e374071401d9d6777161271d
- SHA1 1c5749c6199c8e3746f21d1746520d5cfdb24850
- SHA512 7934e63d9ffd9dd9f4199738de5574243527303d34f248cee04c9cb02c1cd86ee4939bf004214a1d3eef344612241a84caebfc53c0b7ee3e394b0bccc9f9d2df
- SSDEEP 49152:Kgi+56kStk97S2vtV/2k7n4GfocdIoxCuGhj:Kgo69ekn4Gf3Y
- TLSH
  T1E5F55A4463F84F15C22EC27CC353421EE2B1A2C35761A1CF8569CAE52F8B7E3967A1D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Avalonia.DesignerSupport.dll
- Size 296KB
- SHA256 31f9bb278bfac4d1fb9d3e560678282ad48bdb8ba2a814c4855a63be7ff19ef5
- MD5 e3ba385fbd9980f3a5faf253b9961799
- SHA1 fc28ee7267c7381515693c151f2ecfb98acb5412
- SHA512 5c275cf11d1f1446dc405127e409ed906839d4dda40aa3fc1968fe8c015aa166166899ab384b85d7d88ac7772cef0a90931e68d5469d91d3f60b8c0d35a6534b
- SSDEEP 6144:5SKqP29PU/7aHH3ZlQHBnyZMlesTxLSy8e:5SR2cTanJCRyZMXt
- TLSH
  T11054BF1CD3DC8932C66F857C92975542A3FFB44257A1D2CB0058A7AE1EA3BC6B631723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Avalonia.Desktop.dll
- Size 28KB
- SHA256 bf6d8ea93dd20172df731f3a58d11b52be3299990d10131450876e45e7f3bd1f
- MD5 fc25f15e4a3596fc04a69ce867155cb1
- SHA1 0e383626640d96fa361bb93e28e127a4d0755fc9
- SHA512 fcf4d148df8c79736397febf39d438bbbfbcf782480685047ddf70bb6b5c1e1d7f59761181a8f3b6c2bfd633c14131e9238e453522aaf81865a42e97ee463413
- SSDEEP 192:33BMTPgxK5ZnhrVU/Pv7NFXaAgY6DMZPGlGQt7:3VkhVUREYZ8B
- TLSH
  T1B2D2A8E593111263ECE28932B5FEF996613BB582AEE1CB975230734AC817B340F61F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Avalonia.Dialogs.dll
- Size 320KB
- SHA256 223f9b86dbde8e6f91b5f4feeaa4d9c9fcc82e53abb2561f6b0b7e4a081795f5
- MD5 20fef868bae1fbdd9ab74c21266359d9
- SHA1 8485a4a2bdda772e6089ffe6ad81c4d166ef91de
- SHA512 79d7530c5a90ea6ab08a34349cdc80b777733555f06abc1808f7652d135e596430d612037702935307d347a453ec649c782f66dfd724b9a42b993d175e3a86ca
- SSDEEP 3072:GX76RTH9XlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPt3/yzBuNOIOU7og2Fn8QKYFNU:HNzqXpSIE6Ey/SmWUMxFnR9EPOoNyM
- TLSH
  T149644B00C2405A29C6D6B57CB87E677E4EBAE419BB95D1477095AB700B83B80FC387AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Avalonia.FreeDesktop.AtSpi.dll
- Size 1.6MB
- SHA256 bdc76490f3be7264d272403d6aca7f2db6515950f7ea4dd092aa4f0da562c4bb
- MD5 41a32720fef637f63fe30e1aaaa9f514
- SHA1 c34ce6b0c0b344007576bd258ba55fa09064087a
- SHA512 c2d050646a32c93d71253ec97ddd65ade1c86a214f1cc43b45643d0e6f01a032decda302c25ce5e1608d5cc4f0c80ff7f689e4a2322d750e807dbc566867afa5
- SSDEEP 24576:eSUQi57B++21ZJisHlKIh8AuaCXQwvB3qY:Hz070l1ZJisHlKIh1u
- TLSH
  T1A1754A64B794070AD77AD1BE83528141F6F2AC6B4B21D5CF0B81EC906FEB7D26732912
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Avalonia.FreeDesktop.dll
- Size 612KB
- SHA256 23e6b503f1db71b9682d859bafc190c08216f719a5c1552ca81a5a3297378833
- MD5 5b3d5656ede34fbfeb051739c1727f45
- SHA1 18ce8523aa586602960e9abd9d603f5e563b0a69
- SHA512 f40de22cb231d3d3f101e54948b6b83282b5251feb86f31bf5fb2c64862750ae641b4bc3fc8add6001e9251c51fbd2dc95a68a2cb16dfa02089430d287e3e6e4
- SSDEEP 12288:Qn+B8Ef4lh0NaVTL+gJxeFKmdArMrM4cnurhbU:QnC49+8eFKmdTNcnu9
- TLSH
  T17CD4494AE3940F85C66FD6BDDA4B5420E7B2E8959B95C7CF5088E88E1F033E0867531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Avalonia.HarfBuzz.dll
- Size 40KB
- SHA256 05ca9e2110a505b0e5da692ab53f8ddef65832b67b722aa11599d229531a0618
- MD5 6688628cd35ebe43816bfbd3acd64f29
- SHA1 e34ec2b4ff9e968f0f78f97a72f7083d39168f22
- SHA512 54f5ad93af70c3c39e6a688138d18afe2ac68e722d42258e0c9f96c4709a0955c24673f79fdd9b924a13bd5ea1e1b6cdc8cdc61f8bd290af266ac8bf021681ee
- SSDEEP 768:zsT8agvymYVzy4ePwUkeeNQtHDjesYZ82vbfhX0:zsIfvyFzyFpN9YFfhX0
- TLSH
  T14D0318C4D34446B2E9DDC932F0AFBD5B9532F3426AE0ABCB42A4664DEC137900F75A25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32